There are lots of <A HREF="/topics.php#ipfilter">articles on ipf</A>. I prefer it over ipfw. It's multi-platform, not just FreeBSD. I find it easier to configure than ipfw. I also like the way the NAT is quite separate from the filtering.